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Abstract 

We consider sets r(n, s, k) of narrow clauses expressing that no defini¬ 
tion of a size s circuit with n inputs is refutable in resolution R in fc steps. 

We show that every CNF shortly refutable in Extended R, ER, can be 
easily reduced to an instance of r(0, s, k) (with s, k depending on the size 
of the ER-refutation) and, in particular, that r(0, s,fc) when interpreted 
as a relativized NP search problem is complete among all such problems 
provably total in bounded arithmetic theory Vj. 

We use the ideas of implicit proofs from [9l[T0] to define from r(0, s, fc) 
a non-relativized NP search problem iP and we show that it is complete 
among all such problems provably total in bounded arithmetic theory V2 ■ 

The reductions are dehnable in Sp 

We indicate how similar results can be proved for some other propo¬ 
sitional proof systems and bounded arithmetic theories and how the con¬ 
struction can be used to dehne specific random unsatisfiable formulas, and 
we formulate two open problems about them. 

Let C be a size s circuit with n Boolean inputs x = xi,..., and in the 
basis 0,1, -I, V, A. It is defined by s instructions how to compute Boolean values 
y = yi,... ,ys, all of which have one of the following forms: 

• yi := Xu for some u < n, 

• yi :=0 or yi := 1, 

• Vi '■= ~'yj for some j < i, 

• yi := yj V yk or yi := yj A yk for some j, k < i. 

The value of ys is the output value of C and is denoted also as C'(x). Let 
Defji’'’(x, y) be the canonical 3CNF formula expressing the conjunction of all 
instructions. For example, instruction yi := 0 is represented by one clause 
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{y^}, y^ ■= ~^yj by 2 clauses { 2 /i, %}, { 2 /°, ?/°} and instruction yi := yj V yk is 
represented by three clauses 

{y'j^yl} > {yl^y }}, {y°^y]^yk} 

where for a literal £ define := £ and := Def^’* ’ (x, y) has at most 3s 

clauses. 

It is easy to prove in (propositional) resolution proof system R that the 
computation of C is unique: in 0{i) steps derive from Def(^’*(x, y) UDef(^’*(x, z) 
clauses {y}, z^}, {y^, z}} expressing that yi = Zi. The whole proof of ys = Zg 
has 0(s) clauses and its structure is quite close to that of C. 

But can we prove equally easily that a computation of C on x exists? 
This question is in propositional logic represented by the question whether 
Def(l.’*(x, y) is consistent, i.e. not refutable, and we take as our refutation 
system R (more precisely, its slight technical variant R“ defined in Section [1]). 
Given n > 0, s, k > 1 we shall define a set r(n, s, k) of narrow clauses such that 
satisfying assignments for r(n, s, k) would be precisely k step R“-refutations of 
sets DeiQ^{x,y). Our question can be then phrased as follows: How hard it is 
to refute r(n, s, k)7 

We will, in fact, concentrate on the case n = 0 in which sets r(0, s, k) talk 
about refutations of Def^^(y), sets of clauses defining a straight-line program 
C computing Boolean constants (i.e. C has no inputs x). Using standard tech¬ 
niques of proof complexity we show that sets r(0,s, fc) express the reflection 
principle for Tseitin’s [T^] Extended resolution ER, and hence any proof system 
that refutes these sets by polynomial size proofs has at most polynomial slow¬ 
down over ER (it simulates it in the standard terminology). In fact, due to the 
combinatorial transparency of r(0, s, k) we use rather only the idea how reflec¬ 
tion principles work rather than any ’’technique” surrounding them. Further, 
the simulation yields straightforwardly a reduction of unsatisfiable CNFs A to 
r(0, s, k) where k depends on the size of an ER-refutation of A, if we interpret 
them as relativized total NP search problems with oracles representing truth 
assignments. 

We will also show, using the idea of implicit proofs from 0110], how to define 
ordinary (i.e. non-relativized) total NP search problems iP and show that these 
are complete among all NP search problems provably total in theory V 2 of Buss 
[3] . The reductions are definable in S 2 ■ Another total NP search problems with 
this property have been defined earlier by Kolodziejczyk, Nguyen and Thapen 
[S] and recently by Beckmann and Buss 0. 

We shall conclude the with remarks how to modify the construction for some 
other proof systems and how to use it to define random unsatisfiable formulas, 
and we formulate two open problems. 

Background from proof complexity we assume is standard and can be found 
in [Hj. Only Section [3] presupposes knowledge of a specific material from 0ITU]: 
we explain there the underlying ideas and give precise references but we shall 
not repeat that material here. 
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1 Formalization: sets r(n, s,/c) 


We shall first augment R a bit to make it technically more convenient. First, 
we shall allow also constant 1 in clauses and allow as new initial clauses all C 
containing 1 (we shall call these new initial clauses 1-axioms). Second, we add 
the weakening rule: 


C_ 
D ’ 


if CCD. 


Denote this augmented resolution system R™. The reason for the modifications 
is that one can substitute constants for variables in an R^-proof and it remains 
an R^-proof (delete all literals evaluated to 0 and replace resolution inferences 
on variables substituted for by weakenings). Additional reason for the weakening 
rule is that otherwise it is a bit cumbersome to talk about a derivation of D 
from CCD: as R is a refutation system one has to talk instead of refuting the 
set of clauses 

{C}\J{{(°} \ £&D} 


and such derivations is even more cumbersome to concatenate (recall from the 
introduction that := -^t). 


Fix n > 0 and s,A: > 1. Formula T{n,s,k) talks about a potential /c-step 
R’"-refutation of Defji,’^ for an unspecihed C (it is coded by atoms of r(n, s, k)). 
For the purpose of the following discussion call these steps Di,... ,Dk. 

Clauses Di may contain constant 1 or literals corresponding to x, y variables, 
i.e. all together up to 1 + 2(n + s) different objects. Formula F(n, s, k) will thus 
use 


• atoms qf with u = 1,... ,k and i G {—(n + s),..., —1,0,1,..., (n + s)} 
The intended meaning of these is: 

. = 1 iff 1 G D„, 

• g“ = 1 for f = 1,..., n iff Xi G D“, and for i = —1,..., —n iff x° G D", 

• = 1 for j = 1,..., s iff G £>“, and 
q1n+j = 1 for j = -1,..., -s iff y° G £>“. 

We shall call these variables q-variables and their set q. 

There will be also p- variables Pu,v, u = 1, ..., fc and v = 1,... ,t (we shall 
specify t in a moment). The intended meaning is that an assignment a“ G {0,1}* 
for Pu = Pu,i, ■ ■ ■ ,Pu,t uniquely determines complete information about how £>„ 
was inferred from earlier clauses and if G Def(f’* it also contains information 
assuring that Def(f’* clauses have the right form. To simplify the notation we 
shall assume that k > 3s and s > n and that the clauses of Def(f’® are listed as 
first 3s clauses Di ,..., Dss, with Dzr- 2 , D^r-i, D^r defining the instruction for 
Pr (if the instruction needs only one or two clauses the other are dummy, say 

{I})- 
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There are at most 2 + n + (r — 1) + 2(r — 1)^ < Oik^) instructions how 
to compute yr and a“ has to specify this uniquely for u = 1,..., 3s. For u = 
3s + 1,..., fc we need a“ to specify by which rule and from which earlier clauses 
was Du inferred: there are at most 2 + (m — 1) + (2 + n + s)(m — 1 )^ < 
possibilities. Thus if we pick t := 31ogfc, {0,1}* has enough room to encode by 
its elements all possible situations. 

It will be convenient to describe the clauses forming r(n, s, k) as sequents 

f-l 5 • ■ • 7 ^ '^e+1 j ■ • • 5 ^f 

representing the clause 

For a e {0,1}* let p„(a) be the set of literals 

That is, a is the unique truth assignment satisfying the conjunction of literals 
in p„(a). 

The set r(n, s, k) consists of the following clauses divided into five groups: 

7 1. For u € {3r — 2,3r — 1,3r} for r = 1,..., s, if a € {0,1}* does not specify 
a valid instruction for computing yr then r(n, s, k) contains clause 

P«(a) . 

72 . For u G {3r—2,3r—1,3r} for r = 1,..., s, if a € {0,1}* does specify a valid 
instruction for computing yr then we know about constant 1 and about 
every x- and y-variable whether or not it occurs in and whether or 
not this occurrence is positive or negative. Hence we include in F(n, s, k) 
for every q-variable g“ exactly one of the clauses 

p„(a) ^ g" or p„(a) -)> -.g" 

as specified by a. 

73 . For u = 3s + 1,... ,k, if a G {0,1}* does not specify a valid inference for 
Du, T{n,s,k) contains clause 

P«(a) ^ . 

74 . For M = 3s + 1,..., /c, if a G {0,1}* does specify a valid inference for Du, 
three cases can happen: 

(a) Du was inferred from Du, Du, resolving literal ^, where t G Dy and 
4 G Du,, and £ an X- or an y-literal. 
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Let i G {(—(n + s),..., —1,1,..., (n + s)} correspond to £ and —i to 
£°. Then r{n,s,k) contains clauses: 

p„(a) q'" p„(a) p„(a) ^ p„(a) -.q", 

(these clauses enforce that £ and £° appear in Du,Dy,Dyj as pre¬ 
scribed by the resolution rule), 

and for j ^ i, —i, j G {(—(n -I- s),..., —1,1,..., (n -|- s)} r(n, s, k) 
contains further clauses 

p„ (a), gj q" P« (a), qf -G qj P« (a), q], qj 

(these clauses enforce that other literals are passed from Dy, Dy, to 
Dy and that no other are). 

(b) Dy was inferred by weakening from Dy, v < u. Then T{n,s,k) 
contains all clauses 

Puia),qi . 

(c) Dy was inferred as a 1-axiom. Then r(n, s, k) contains clause: 

p„(a) . 

75 . Finally we add to r(n, s, k) clauses 


for all i, enforcing that Dk = 0. 

Let us summarize. 

Lemma 1.1 For all n > 0, s > n, k > 3s the set T(n,s,k) contains 0(k^) 
clauses of width at most 3-1-3 log k and it is not satisfiable. 

2 Reductions 

Reflection principles for a proof system Q imply, over an arbitrary fixed base 
proof system satisfying a few technical properties, all Q-provable formulas and 
only with a polynomial slow-down over Q. This means that if (/? has a Q-proof 
of size m then ip can be derived in the base system from a substitution instance 
of a reflection principle for Q by a proof of size at most The reader can 

find all detail in [5J Sec.9.3] but these details are not needed for the arguments 
below (although they may help in understanding what is going on). 

The set r{n,s,k) expresses conditions an R“'-refutation of some set Def(f.’® 
would have to satisfy and hence it is the formula -i /\ r(n, s, k) which corresponds 
to reflection principles for ER. ER-refutation of a set A of clauses amounts to 
proving formula -1 /\ A. Thus we want derivations (in some base system, here 
it will be R'") of -i /\ A from an instance of -i /\ r(n, s, k). In the framework of 
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refutation systems this means that we look for derivations from A of all clauses 
of a substitution instance of T{n,s,k). In fact, it will be enough to consider 

r(o,s,fc). 

A map a assigning to variables from a set Y constants 0,1 or disjunctions of 
literals corresponding to a set of variables X will be called a clause-substitution 
from X to Y, and the maximal size of a disjunction a assigns is the width of cr. 

Let r, A be two sets of clauses in disjoint sets of variables Y and X, respec¬ 
tively (to avoid any confusion when dealing with substitutions). We say that A 
reduces toT by a clause-substitution cr iff cr is clause-substitution from variables 
of A to variables of L such that for each clause D G T one of the following cases 
occurs: 


(a) cr{D) is a 1-axiom, 

(b) cr{D) has the form: 

n,\/E^\/F,Y ( 1 ) 

where E C F are sets of literals. 

(c) (t{D) contains as a subset a clause from A, 

Note that in the cases (a) and (b) is a{D) logically valid. 

For the construction in the proof of the next theorem it will be handy to use 
the following notation. For z a variable and a, b € {0,1}* put 

sel{z, a, b) 

to be the <-tuple from { 0 , 1 , z, -iz}* whose i-th coordinate is 

sel{z, Ui, bi) := (oi A z) V (&i A -<z) V {at A bi) . 


That is, sel{z,ai,bi) is a constant or a literal defined by the following cases: 


sel{z,ai,bi) 


0 ii Oi = bi = 0 

1 a Oi = bi = 1 

z if Oj = 1 A = 0 

-iz if Oi = 0 A = 1. 


Theorem 2.1 Assume A is a set of clauses of width < w in n variables that 
has an ER-refutation tt with fc(7r) clauses. 

Then for some k = 0{nk{{'!r)) and s < k/3, A reduces to r(0,s,fc) by a 
clause-substitution of width < max(rt;, 3). 


Proof: 

Assume x are the n variables of A. Introducing up to 0 (nfc( 7 r)) new exten¬ 
sions variables we may assume the width of tt is at most max('u;, 3). Let y be 
s extensions atoms used in tt. We may further rearrange the resulting proof so 
that the clauses defining the y variables are precisely the first 3s clauses and are 
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followed by all |A| clauses from A. Let k = 0{nk{Tr)) be the number of steps 
in the resulting ER-refutation and call these steps Du- 

Take the set r(0, s, k) and define the following substitution cr for its p- and 
q-variables: 

1. For all q-variables qf with i 7 ^ 0 substitute 0 or 1, depending on whether 
the y-literal corresponding to i occurs in Du- 

2 . For all variables substitute \J Eu, where Eu is the set of x-literals 
occurring in Du together with 1, if 1 G Du- (Note that \Eu\ < w-) 

3. For p-variables p„ with t 6 = 3r — 2,3 — l,3r and r < s define a as follows: 

(a) If Du is one of the three clauses corresponding to an instruction of 
the form yr '-= Xj, put 

<x{Pu) ■= -sel{xj,a.,h) 

where a and b G { 0 , 1 }* define the instructions yr := 1 and yr ■= 0 , 
respectively. 

(b) Otherwise substitute for p„ the string a“ G {0,1}* defining the par¬ 
ticular instruction of Def((;’* in tt. 

4. For p„ variables with u = 3s-|-l,..., 3s-|-|A| substitute a G {0,1}* defining 
the clause Du as being a 1 -axiom. 

5. For ■u = 3s-|-|A|-|-l,...,fc consider several cases what to substitute for 
Pu: 

(a) Du was inferred as a 1-axiom: substitute for p^ as in item 4. 

(b) Du was derived in tt by weakening from Du'- substitute for p„ the a 
specifying this information. 

(c) Du was derived by resolution from De,Df resolving variable yf- sub¬ 
stitute for Pu the a specifying this information. 

(d) As in (c) but the resolved variable was Xi- Assume Xi G De and 
-^Xi € Df. Substitute for p„ the expression 

sel(xi, a, b) 

where a, b G {0,1}* specify that Du was derived by the weakening 
from Df OT Dg, respectively. 

We need to verify that for every clause D G r(0, s, k), cr{D) falls under one of the 
three cases (a), (b) or (c) in the definition of reductions by clause-substitutions 
above. We shall treat the five groups 7 I - 76 of clauses forming r(0, s, k) sepa¬ 
rately. 

li D = p„(a) —> belongs to groups 7 I or 73 , ( 7 (p„(a)) contains a false literal 
and so (j{D) is a 1-axiom. 
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If D is from group 72 , then a{D) is clearly a 1-axiom by the definition of 
for all instructions for yr falling under 3(b) above, i.e. except when it has 
the form '■= Xj. In the latter case the instruction is represented by clauses 

{yr.^Xj} , {-^yr,Xj} , { 1 } 

and D is one of them. The definition of tr in 3(a) above using selection term on 
Xj yields <j{D) which either contains 0 in the antecedent (and hence <j{D) is a 
1 -axiom) or one of the literals Xj,x^ occurs in both antecedent and succedent 
of (7{D) and hence it falls under the case (b) of the definition of reductions. 

If D is from group 74 (a) then by item 5(c) of the definition of a, <j{D) 
becomes a 1-axiom. If D is from group 74 (b) then a{D) falls under the case 
(b) of the definition of reductions: in particular, for i = 0, cr(g)') is contained 
in (j{qf) (the E and F in that definition). If D is from group 74 (c) of r(0, s, k) 
then (t{D) is either a 1-axiom as cr(( 7 g) contains constant 1 if was a 1-axiom, 
or it falls under the case (c) of the definition of reductions as cr( 9 o) is Du G A 
(item 4 of the definition of a). 

Finally, D from group 76 of r(0, s, k) is trivially turned by cr to a 1-axiom. 

q.e.d. 

We may interpret Theorem l2.1l as a proof-theoretic reduction: each clause of 
(T(r(0, s, k)) can be derived from A very easily in any proof system P simulating 
efficiently the weakening rule and deriving quickly all 1-axioms and all formulas 
as in 0 and hence the task to refute A is in P reduced to the task to refute 
r(0, s,A:). One can easily list various suitable weak P (e.g. tree-like i?*(log) 
or talk about R’"-derivations of F, 11 from all Ti,£, i & E, in O) but it seems 
redundant to do so. 

Alternatively, we may interpret the theorem as a reduction between rela¬ 
tivized total NP search problems (see e.g. [I] for definitions). That is, given 
an ER-refutation tt of A in n variables x with k{TT) steps, we have r(0, s, k) for 
specific s,k bounded by 0{nk{TT)) such that it holds: 

• For any assignment a to variables x of A (a is the oracle), if we know a 
clause of r(0, s, k) false under the assignment aocr to its variables, we also 
know a clause of A false under a: a o a{D) can only fail if it falls under 
item 2 of the definition of reductions and hence it contains a clause of A 
false under a. 

Note that, for a fixed tt and r(0, s,fc) with parameters determined by it, com¬ 
puting a requires at most w calls to a. Hence if ic is a constant or at least 
bounded by log(n|A|) the reduction is polynomial time in the sense of [I]. 

It is well-known (see e.g. Uli) that propositional translations of a second or¬ 
der VSj (Q:)-formula (expressing the totality of a relativized NP search problem) 
that is provable in bounded arithmetic theory of Buss [3] have polynomial 
size Extended Frege proofs, i.e. in the refutation set-up the corresponding sets 
of clauses have polynomial size ER-refutations. This is [H Thm.9.1.5], building 
on earlier results of Cook [4] and Buss [3]. 


Theorem o thus yields the following statement (the definability of the re¬ 
duction in Vi follows from its explicit nature). 

Corollary 2.2 Assume that a relativized NP search problem is provably total 
in bounded arithmetic theory V/. 

Then the problem polynomially reduces r(0, s,fc) and the reduction is defin¬ 
able in Vfi. 


3 Total NP search problems iV 

We shall consider total (non-relativized) NP search problems given as follows. 
Let ..., V*) be a circuit with tm inputs divided into t blocks of size m. 

Such D defines a f-ary relation on {0,1}"*; as a structure it may be exponentially 
large relative to the size of D. The general form of search tasks we shall consider 
is: Given pair £>), find a subset W C {0,1}"* of some specific polynomial 

size such that the induced substructure is contains a specific configuration 

known to exists by a general combinatorial or geometric statement. m gives 
several examples but perhaps the most interesting is when t = 2 and we think 
of D as defining an undirected graph without loops and W either contains a 
list of m/2 vertices from {0,1}™ inducing a homogeneous subgraphs or one or 
two vertices certifying that D has a lop or is non-symmetric. Ramsey’s theorem 
2™ —(m/2)| guarantees the existence of such a W. 

We shall use the idea of implicit proofs from [5], proofs of exponential size 
described bit-by-bit by a circuit and accompanied by a certificate that the circuit 
indeed defines a proof. In particular, a refutation of a formula (j) in implicit ER 
proof system, denoted iER, is a pair (p, D) such that: 

• D{u, v) is a circuit with two inputs strings u,v € {0,1}"’' defining a 2™ x2"* 
0-1 array which we interpret as describing an ER-refutation of (j) in the 
same sense as truth assignments to p- and q-variable of r(0, s, fc) talk 
about a potential ER-refutation, 

• p is an ER-proof of the propositional formula formalizing the statement: 

— D defines a valid ER-refutation of (f. 

The reader is invited to consult [S] for details of the definition. 

The way how we shall use iER was first employed (and justified) in [lOl 
Thm.5.4]. The idea is simple: we may allow D above to describe not only refu¬ 
tations of polynomial size formulas (as it was defined in 0) but of exponential 
size formulas given themselves by small circuits. 

In particular, if 3y{\y\ < \x\^)ip{x^y) is a E^-formula with ip G Sq, then the 
sentence Va:(|x| = n)3y(|j/| < |x|^)ip(x, y) is true iff the set 

-^ip{x, w) , all w such that |ri;| < n° (2) 
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is not satisfiable by any x € {0,1}", and hence it is refutable (in ER, in partic¬ 
ular) . Set ([2]) has exponential size but it can be easily generated by a size 
circuit from w’s. We use these ideas as follows. 

The iT{m) NP search problem, the instance of iT for parameter m, is 
defined as follows: 

1. The input is pair D) with D{x, y) a size circuit with 2 -m inputs. 

2. Interpret D as defining an evaluation to p and q-variables of r(0,s, fc) 
where fc = 2™ and s = 

[There are 2s-|-1 variables and 3 log k = 3m variables in p„, all tt < fc = 
2™, so D has enough input bits to define a 0 — 1 array of bits evaluating 
all these variables.] 

3. Output: find a clause of r(0,s, fc) false under the evaluation. 

[There are 0{k^) = 0(2®™) of possible outcomes so the output is < 5m 
bits.] 

The parameters are fixed at \D\ = m? and s = 2™/^ in order to reduce the num¬ 
ber of parameters in the problem. Modifying m linearly allows to accommodate 
arbitrary polynomial relations among k,s and logfc, \D\. 

We state and prove the next theorem using the ideas and referring to facts 
about the concepts described above; all details for these facts can be found in 
0110] at the specifically cited places. 

Theorem 3.1 Assume an NP search problem is provably total in theory V 2 ■ 
Then the problem can be polynomially reduced to iT. The reduction is definable 
in S 2 . 

Moreover, jT is itself provably total in V 2 ■ 

Proof: 

Let 3y{\y\ < \x\‘^)ip{x,y) be a E^-formula with tp e Eq such that Vf proves 
Va;3y(lj/1 < \xf)(p{x,y) . 

In particular, \y\ < \xf^ A <p{x,y) defines a total NP search problem. 

By the construction underlying 0 Thm.2.1], as shown in the proof of [la 
Thm. 5 . 4 ], there exists an iER refutation {p,B) of formulas from (0) above ex¬ 
pressed as a set of '> clauses of width <w = such that: 

• B{i,j) is a size circuit B(i,j) with 2 • inputs describing an 

ER-refutation tt of (0), 

• circuit B is definable in S '2 from 1*^") and S\ proves that B defines an 
ER-refutation of the set 0) {p plays a role in this). 


10 


Use TT for the definition of a clause-substitution cr as in the proof of Theorem l2.ll 
but whenever we need a bit of tt we compute it by circuit B. The substitution has 
width < w = and so the reduction so obtained is a polynomial reduction 

of the search problem < \x\'^)^p{x, y) for x of length |a;| = n. 

The second statement follows as V 2 proves the soundness iEF (= iER) 
proofs, cf. O Thm.2.1]. 

q.e.d. 

One can generalize this construction to stronger theories as follows. In [5] 
we used the characterization from [7] of bounded first-order consequences of V 2 
as those of formal system S 2 + 1-Exp : S{x) is provable in this system iff S 2 
proves 

t{x) < \y\ S(x) 

for some term t(x). The intuition is that while ER corresponds to 52, iER 
corresponds to adding 1-Exp and that corresponds to extending first-order 52 
to second-order . The construction in liiin] works also for 5^ -I- 2-Exp (and 
third-order extension of 52 ) and i(iER), and higher iterates, as pointed out 
in 0 Sec.4]. In general, if a theory T corresponds to a proof system P then 
iP corresponds to T -|- 1-Exp and one may try to define NP search problems 
analogous to iP where B is assumed to describe a P-refutation. It is a challenge 
to describe this construction in a direct, combinatorially transparent, way. 


4 Concluding remarks 

One can restrict circuits (7 that can be used in Def(l.’* to a class of circuits and it 
is clear from the construction that taking for these classes NC^,AC^ or AC°(2) 
yield statements analogous to Theorem l2.1l for Frege system and constant depth 
Frege system in the DeMorgan language, and constant depth Frege systems in 
DeMorgan language augmented by the parity connective, respectively. Simi¬ 
larly, Corollary 12.21 and Theorem 13.11 can be analogously derived for theories 
corresponding to those proof systems, cf. [ill]. 

For a given s > 1 and k > 3s we can define the following random process 
yielding a set of clauses (r are the random bits used): 

1. Pick s instructions for computing variables y defining a circuit Cr without 
variables: the instruction for yi is picked uniformly at random from all 
legal instructions for j/i, 

2. substitute in r(0, s, fc) for all variables p„ and g“ with u < 3s the bits 
defining clauses of Def^® corresponding to Cr chosen in step 1. 

Let us denote the random set of clauses so constructed by r(0, s, fc)(Cr); it is 
always unsatisfiable. The following seem to be interesting open problems: 

1. Is it true that with a high probability over r the set r(0, s, k){Cr) requires 
long refutations in any proof system not simulating ER? 
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2. Is it true that r(0, s, k) can be reduced by a clause-substitution to a prob¬ 
lem r(0, s', k')[C) for some k' polynomially bounded in k and some specific 
size s' circuit C? 

If the first question had an affirmative answer sets r(0, s, k){Cr) would provide 
an easy to compute source of hard formulas that are always unsatisfiable (other 
proposed constructions yield sets unsatisfiable with a high probability but not 
always). 
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